This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json) Hash identifier: ui/mz+I0LvP1g1AKxgzkstFX3kpwa1Uk0DUwHLMJrdg= Subject key identifier: 3E:59:70:3A:E3:4B:F1:C6:3C:2D:C9:CB:E1:2A:C5:9E:6E:2A:6D:2C Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Certificate serial: 019B42801C154462FC152EB62A695D8C127A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft Manifest number: 0A5C Signing time: Sun 21 Dec 2025 20:00:50 +0000 Manifest this update: Sun 21 Dec 2025 20:00:50 +0000 Manifest next update: Mon 22 Dec 2025 20:00:50 +0000 Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: kjbMcOxmTqD+1bWxfhCxLHgws3gU2sVugNY+4rZ09Es=) 2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:1c:15:44:62:fc:15:2e:b6:2a:69:5d:8c:12:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Validity Not Before: Dec 21 20:00:50 2025 GMT Not After : Dec 22 20:00:50 2025 GMT Subject: CN=3e59703ae34bf1c63c2dc9cbe12ac59e6e2a6d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:52:00:0f:b4:2a:62:50:ba:c5:48:67:2f: b7:81:ce:d6:86:12:60:6e:9f:bb:87:fa:bd:6c:06: d3:ed:12:38:ac:ea:07:ab:93:86:b0:98:59:11:4a: 09:6d:cd:13:03:10:51:8b:81:9c:0d:07:6d:bf:b9: ec:09:5e:58:d2:de:cf:15:01:0c:e6:8b:92:f5:1f: 57:81:6a:a3:09:ae:1f:7b:c1:92:58:15:e9:f2:7b: 93:cb:72:a4:c2:33:b6:2f:7c:71:c9:fd:ab:7f:39: 70:0b:80:f4:ba:00:4d:b2:82:d9:4c:66:73:2f:2c: d0:e1:78:40:4f:c9:0e:dd:46:eb:6f:07:c2:3e:36: a6:07:5a:c7:56:91:4c:dc:36:e8:7a:e8:10:0b:01: fb:13:44:0b:db:32:58:c9:57:4b:46:f1:09:f5:bb: 0c:4e:70:8c:1d:5b:68:17:24:85:30:6b:03:5c:c0: fe:ef:0a:64:cf:15:fd:3b:87:59:28:9c:8d:de:1a: fe:ab:48:ee:af:ce:b5:e8:29:92:90:2b:25:3c:28: 13:35:97:1a:22:4b:3b:0a:b9:26:11:52:d6:e6:ce: d7:35:42:01:d9:bb:f2:89:a9:1c:32:92:9b:51:e9: 20:62:fa:4b:10:03:b2:3a:38:4d:70:48:22:f4:b9: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:59:70:3A:E3:4B:F1:C6:3C:2D:C9:CB:E1:2A:C5:9E:6E:2A:6D:2C X509v3 Authority Key Identifier: keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e5:82:c7:0c:44:4d:31:a3:99:62:99:2d:12:f7:7b:4b:5d: 39:4c:86:48:c0:32:5e:21:9f:f7:ba:c7:96:52:7f:8e:3b:21: 19:f7:74:cb:6e:b7:52:00:d4:4b:e4:34:2b:96:25:d1:6a:6d: c8:53:56:65:28:f1:26:da:cd:5d:06:52:4c:0c:b4:d3:63:e0: 24:0b:a3:f4:3f:17:e8:92:0c:84:9e:ef:36:6c:a0:f6:81:51: ea:43:db:4f:84:45:b7:18:de:9b:b8:fb:bb:37:55:0e:a0:c6: 9f:ce:b0:63:42:f6:db:7c:3b:e9:e4:bd:f2:35:ad:90:a0:89: ca:50:be:ec:57:05:2b:08:62:69:0b:90:b2:62:49:49:29:23: e8:50:e5:63:14:d2:ac:17:75:95:f0:09:38:04:ee:ea:a9:74: f2:7d:df:c2:bb:b5:a9:ff:6c:20:58:52:ed:4d:46:b5:b6:d6: 41:bf:32:b4:26:a0:9a:f2:fa:00:df:86:f0:5c:0f:04:b0:43: 83:83:78:6a:bb:7d:00:9b:35:fd:12:f0:6a:ce:26:c1:b0:f0: b9:d7:2a:ec:3a:5b:58:f2:3c:17:7d:01:ed:f3:9f:57:81:aa: b0:75:84:da:cb:47:3b:e6:24:76:73:ce:a0:d8:bc:58:4f:2a: 12:b2:a2:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgBwVRGL8FS62KmldjBJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiOWI1OGVlMDhlODNmMWE5YWQ0ZTk2NDNlODBkM2I0 MGNiM2UwHhcNMjUxMjIxMjAwMDUwWhcNMjUxMjIyMjAwMDUwWjAzMTEwLwYDVQQD EygzZTU5NzAzYWUzNGJmMWM2M2MyZGM5Y2JlMTJhYzU5ZTZlMmE2ZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13dSAA+0KmJQusVIZy+3gc7WhhJg bp+7h/q9bAbT7RI4rOoHq5OGsJhZEUoJbc0TAxBRi4GcDQdtv7nsCV5Y0t7PFQEM 5ouS9R9XgWqjCa4fe8GSWBXp8nuTy3KkwjO2L3xxyf2rfzlwC4D0ugBNsoLZTGZz LyzQ4XhAT8kO3UbrbwfCPjamB1rHVpFM3DboeugQCwH7E0QL2zJYyVdLRvEJ9bsM TnCMHVtoFySFMGsDXMD+7wpkzxX9O4dZKJyN3hr+q0jur8616CmSkCslPCgTNZca Iks7CrkmEVLW5s7XNUIB2bvyiakcMpKbUekgYvpLEAOyOjhNcEgi9LnFkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5ZcDrjS/HGPC3Jy+EqxZ5uKm0sMB8GA1UdIwQY MBaAFARiubWO4I6D8amtTpZD6A07QMs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYt MGVlMmVhN2Q0ODg0LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYtMGVlMmVhN2Q0ODg0 LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuWCxwxE TTGjmWKZLRL3e0tdOUyGSMAyXiGf97rHllJ/jjshGfd0y263UgDUS+Q0K5Yl0Wpt yFNWZSjxJtrNXQZSTAy002PgJAuj9D8X6JIMhJ7vNmyg9oFR6kPbT4RFtxjem7j7 uzdVDqDGn86wY0L223w76eS98jWtkKCJylC+7FcFKwhiaQuQsmJJSSkj6FDlYxTS rBd1lfAJOATu6ql08n3fwru1qf9sIFhS7U1GtbbWQb8ytCagmvL6AN+G8FwPBLBD g4N4art9AJs1/RLwas4mwbDwudcq7DpbWPI8F30B7fOfV4GqsHWE2stHO+YkdnPO oNi8WE8qErKixA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:26:51 2025 by rpki-client